EUVD-2025-115741

Malicious code in canopus-nextjs-cz-conventional-changelog-dotenv-safe npm...

Malicious code in dotenv-safe-postgres-perseus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118c548fba36106c65ab5a4047e37654324785d2a7b091b8c04a743d9c47bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114347

Malicious code in dotenv-safe-nconf-gemini-vortex npm...

EUVD-2025-114357

Malicious code in dotenv-safe-gemini-spica-materialize npm...

EUVD-2025-123260

Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin npm...

EUVD-2025-114333

Malicious code in dotenv-safe-sedna-electron-cors npm...

EUVD-2025-113496

Malicious code in fornax-dotenv-safe-delphinus-kronos npm...

Malicious code in dotenv-safe-bunyan-private-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4780bb51498043095d7629cecb40fa21a3ad1bfe31e192d0c8439d367eb40719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121638

Malicious code in stop-bellatrix-sequelize-dotenv-safe npm...

EUVD-2025-124768

Malicious code in mongoose-dotenv-safe-fornax-xerxes npm...

Malicious code in remark-dotenv-safe-betelgeuse-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f67536623e6020a2084816b1ce2ffd1af360a6738503293222726a849783479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122230

Malicious code in schema-dotenv-safe-europa-castor npm...

EUVD-2025-124545

Malicious code in neptune-pm2-dynamo-dotenv-safe npm...

EUVD-2025-121115

Malicious code in triton-dotenv-safe-typeorm-vulcan npm...

EUVD-2025-115006

Malicious code in cordelia-miranda-dotenv-safe-command npm...

MAL-2025-145996 Malicious code in pavo-dotenv-safe-cosmos-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d370389a73f5f2d8bb1d652817fcd01c99cb04fdd4add1575b54b2c1d2d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141777 Malicious code in dotenv-safe-semantic-ui-corvus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b8da9f5521fb24d5e53f53645f4fb810e158f42eab400a7d5badcd6f44895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143814 Malicious code in janus-jekyll-parcel-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141747 Malicious code in dotenv-safe-dactyl-mira-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ec1957a8e508198687aa6db75cbf6436cd19dca66de00383f10e5b0c6ddd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139449 Malicious code in antares-xanadu-delphinus-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74bc9a61c43f8b3b4c87c88e18264683cf969e9cf7073998f6774e77b9a36b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...